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Remarks 

Claims 2, 3, 28-30, 32-36, and 44-46 are pending. 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
1/31/2008 has been entered. 

Claim Objections 

2. Claims 32 and 33 are objected to because of the following informalities: 

Claim 32 states that "the aligned set of header data for the first packet 
comprises Content Type, Length and Data". It appears as though this 
data is meant to be the payload of the packet, which is not in the header. 
Since the specification provides for no such payload data within the 
header, the above mentioned portion of claim 32 has been construed as 
"the data for the first packet comprises Content Type, Length and Data" 
in order to avoid the issue of new matter for this limitation. 
Claim 33 claims dependency upon claim 31 , which is cancelled. 
Therefore, claim 33 has been construed as being dependent upon claim 
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46. Additionally, "the aligned data for the encryption operations" has 
been construed as "aligned data for the encryption operations", since 
such aligned data for the encryption operations has not been seen in the 
other claims. 
Appropriate correction is required. 



Claim Rejections - 35 USC §112 

3. Claims 2, 3, 28-30, 32-36, and 44-46 are rejected under 35 U.S.C. 112, first 
paragraph, as failing to comply with the written description requirement. The claim(s) 
contains subject matter which was not described in the specification in such a way as to 
reasonably convey to one skilled in the relevant art that the inventor(s), at the time the 
application was filed, had possession of the claimed invention. 

The limitations in claim 46 regarding the "remaining payload data" do not appear 
to be in the specification or amendments thereto. These limitations include "performing 
encryption operations on any remaining payload data for the first packet and the 
authentication code for the first packet" and "wherein the authentication operations on 
the set of header data and payload data for the second packet is performed 
simultaneously with the encryption operations on the remaining payload data and 
authentication code for the first packet". 

As best understood by the Examiner, the current amendment to the specification 
provides the following. It appears as though AIF, AOF, CIF, and COF are acronyms for 
Authentication Input FIFO, Authentication Output FIFO, Crypto Input FIFO, and Crypto 
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Output FIFO, respectively. The meaning of "Fe" is not entirely clear, but this appears to 
be an input that can feed data into both the crypto and authentication input FIFOs. 
Please provide corrections if any of the above is incorrect, and what, precisely, "Fe" 
means, as well as anything else that hasn't been discussed and is pertinent. Assuming 
that the above is correct, it is unclear where "any remaining payload data" is found 
within these tables (or elsewhere in the current specification or provisional application 
60/235,190), since it appears as though crypto processing on the payload is performed 
separately from crypto processing on the MAC or hash created from the header. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 28-30, 33, 35, 36, and 44-46 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Kaplan (U.S. Patent 6,704,871 ) in view of Larsen (U.S. Patent 
7,068,791) and Huynh (U.S. Patent 6,983,366). 
Regarding Claim 46, 

Kaplan discloses a method for accelerating cryptographic 
processing of a plurality of data packets according to a network security 
protocol, comprising: 
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Receiving, in a chip, data for a first packet from an off-chip 
processor (Column 27, line 55 to Column 29, line 12; Column 39, lines 25- 
42; Column 41, lines 16-51; and Column 43, line 1 to Column 44, line 31); 

Performing authentication operations on data for the first packet to 
generate an authentication code (Column 37, line 41 to Column 38, line 
62); 

Performing encryption operations on a set of data in the payload 
data for the first packet, wherein the encryption operations on the set of 
payload data for the first packet are performed in parallel with the 
authentication operations for the first packet (Column 37, line 41 to 
Column 38, line 62); 

Receiving, in the chip, a second packet (Column 27, line 55 to 
Column 29, line 12; Column 37, line 41 to Column 38, line 62; Column 39, 
lines 25-42; Column 41, lines 16-51; and Column 43, line 1 to Column 44, 
line 31); 

Performing encryption operations on any remaining payload data 
for the first packet and the authentication code for the first packet (Column 
37, line 41 to Column 38, line 62); 

Performing authentication operations on data for the second packet 
(Column 37, line 41 to Column 38, line 62); and 
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Passing the cryptographically processed first packet from the chip 
to the off-chip processor (Column 27, line 55 to Column 29, line 12; and 
Column 43, line 1 to Column 44, line 31); 

Wherein the authentication and encryption operations for the first 
packet are performed within the chip in a single pass (Column 37, line 41 
to Column 38, line 62; and Column 41, lines 16-51); 

But does not explicitly disclose that the authentication operations 
are performed on a set of header data and the payload data of the packets 
or that the authentication operations for the second packet are performed 
simultaneously with the encryption operations on the remaining payload 
data and authentication code for the first packet. 

Larsen, however, discloses that the authentication operations are 
performed on a set of header data and the payload data of the packets 
(Column 7, lines 6-45). It would have been obvious to one of ordinary skill 
in the art at the time of applicant's invention to incorporate the secure 
packet system of Larsen into the cryptographic co-processor of Kaplan in 
order to provide multiple authentication codes within each packet, thereby 
allowing the system to determine whether the message came from a 
proper sender via the header's authentication code, so as to allow for 
adaptive retransmission, even when the payload of the packet was 
received in error (and thus, the packet's authentication code is incorrect). 
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Huynh, however, discloses that the authentication operations for 
the second packet are performed simultaneously with the encryption 
operations on the remaining data to be encrypted for the first packet 
(Column 2, lines 24-35; Column 6, lines 19-38; and Column 8, line 23 to 
Column 9, line 8). It would have been obvious to one of ordinary skill in 
the art at the time of applicant's invention to incorporate the packet 
processing techniques of Huynh into the cryptographic co-processor of 
Kaplan as modified by Larsen in order to allow another packet to be 
processed as soon as a particular resource (encryption or authentication 
unit) becomes available, so the system need not wait until the first packet 
is completely processed before beginning processing of another packet, 
thereby allowing the system to process network security protocol data 
faster and more efficiently. 
Regarding Claim 28, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 46, in addition, Kaplan discloses aligning the received set of header 
data for the first packet (Column 39, lines 25-42; Column 43, lines 1-28; 
and Column 44, lines 35-43). 
Regarding Claim 29, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 28, in addition, Kaplan discloses storing the aligned set of header 
data for the first packet in a FIFO to accumulate a predefined amount of 
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data before commencing the authentication operations (Column 38, lines 
50-57). 

Regarding Claim 30, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 29, in addition, Kaplan discloses that the predefined amount of data 
comprises 512 bits (Column 38, lines 50-57). 

Regarding Claim 33, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 46, in addition, Kaplan discloses aligning, for encryption operations, 
the set of data in the payload data for the first packet to provide aligned 
data for the encryption operations (Column 39, lines 26-42). 

Regarding Claim 35, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 33, in addition, Kaplan discloses that aligning, for encryption 
operations, comprises adding padding (Column 39, lines 26-42). 

Regarding Claim 36, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 33, in addition, Kaplan discloses storing the aligned set of data in 
the payload data for the first packet for the encryption operations in a 
FIFO to accumulate a predefined amount of data before commencing the 
encryption operations (Column 39, lines 26-42; and Column 40, lines 43- 
52). 
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Regarding Claim 44, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 46, in addition, Kaplan discloses that the authentication operations 
are performed by an authentication component of the chip, the encryption 
operations are performed by an encryption component of the chip, and 
authentication data generated by the authentication component is passed 
to the encryption component and aligned by the encryption component 
(Column 38, lines 58-62; Column 39, lines 25-42; Column 40, line 42 to 
Column 41, line 15; Column 42, lines 12-29; and Figure 9). 

Regarding Claim 45, 

Kaplan as modified by Larsen and Huynh discloses the method of 
claim 46, in addition, Kaplan discloses that the authentication operations 
are performed by an authentication component of the chip, the encryption 
operations are performed by an encryption component of the chip, and 
decrypted data generated by the encryption component is passed to the 
authentication component and aligned by the authentication component 
(Column 38, lines 58-62; Column 39, lines 25-42; Column 40, line 42 to 
Column 41, line 15; Column 42, lines 12-29; and Figure 9). 



5. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over Kaplan in 
view of Larsen and Huynh, further in view of SSL3spec (Freier et al., "The SSL Protocol 
Version 3.0", 11/18/1996, pp. 1-12). 
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Kaplan as modified by Larsen and Huynh does not explicitly disclose that 
the network security protocol is SSLv3. 

SSL3spec, however, discloses that the network security protocol is SSLv3 
(Pages 3-4, Section 1 ; and Page 10, Section 5.0). It would have been obvious to 
one of ordinary skill in the art at the time of applicant's invention to incorporate 
the network security protocol of SSL3spec into the cryptographic co-processor of 
Kaplan as modified by Larsen and Huynh in order to gain cryptographic security 
between two parties and interoperability between differently coded programs 
(Page 4, Sections 2.1 , 2.2, and 2.3). 

6. Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Kaplan in 
view of Larsen and Huynh, further in view of TLSspec (Dierks et al., "The TLS Protocol 
Version 1.0", 10/28/1997, pp. 1-12). 

Kaplan as modified by Larsen and Huynh does not explicitly disclose that 
the network security protocol is TLS. 

TLSspec, however, discloses that the network security protocol is TLS 
(Pages 3-4, Section 1 ). It would have been obvious to one of ordinary skill in the 
art at the time of applicant's invention to incorporate the network security protocol 
of TLSspec into the cryptographic co-processor of Kaplan as modified by Larsen 
and Huynh in order to gain interoperability between differently coded programs 
and extensibility to other protocols and methods (Pages 4-5, Sections 2.1 , 2.2, 
and 2.3). 
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7. Claim 32 is rejected under 35 U.S.C. 103(a) as being unpatentable over Kaplan 
in view of Larsen and Huynh, further in view of Ganapathy (U.S, Patent 6,557,096). 

Kaplan as modified by Larsen and Huynh discloses the method of claim 
28, in addition, Larsen discloses that the data for the first packet comprises 
Content Type, Length, and Data (Column 7, lines 6-45; and Column 9, lines 1- 
23); but does not explicitly disclose that the data is aligned into rows of data 
where each row of data contains a single type of data. 

Ganapathy, however, discloses that the data is aligned into rows of data 
where each row of data contains a single type of data (Column 17, lines 38-55; 
Column 1 9, line 35 to Column 20, line 25; and Figure 1 ). It would have been 
obvious to one of ordinary skill in the art at the time of applicant's invention to 
incorporate the data aligner of Ganapathy into the cryptographic co-processor of 
Kaplan as modified by Larsen and Huynh in order to properly align and format 
the data before sending it for mathematical (in this case, authentication and 
encryption/decryption) operations, so that the data has any needed sign and 
guard bids pre-pended thereto. 



8. Claim 34 is rejected under 35 U.S.C. 103(a) as being unpatentable over Kaplan 
in view of Larsen and Huynh, further in view of Gaytan (U.S. Patent 5,638,367). 

Kaplan as modified by Larsen and Huynh does not explicitly disclose that 
aligning comprises removing non-valid data. 
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Gaytan, however, discloses that aligning comprises removing non-valid 
data (Column 1 , line 62 to Column 2, line 29). It would have been obvious to one 
of ordinary skill in the art at the time of applicant's invention to incorporate the 
data packing system of Gaytan into the cryptographic co-processor of Kaplan as 
modified by Larsen and Huynh in order to gain better throughput and 
performance by only sending valid data past the buffer. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JEFFREY D. POPHAM whose telephone number is 
(571)272-7215. The examiner can normally be reached on M-F 9:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571)272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Jeffrey D Popham 

Examiner 

Art Unit 2137 

/Jeffrey D Popham/ 
Examiner, Art Unit 2137 



/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2137 



